Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove clearDeps function #80

Closed
wants to merge 1 commit into from

Conversation

daniel-noland
Copy link
Collaborator

clearDeps is a bit of a bug factory as it turns out.

It is not necessary anyway; all it does is shrink the development containers a bit, which we can very much live without.

`clearDeps` is a bit of a bug factory as it turns out.

It is not necessary anyway; all it does is shrink the development containers a bit, which we can very much live without.
@daniel-noland daniel-noland force-pushed the pr/daniel-noland/remove-clear-deps branch from fc0efcf to ef7ece9 Compare February 4, 2025 01:28
@daniel-noland
Copy link
Collaborator Author

closing in favor of #77

Copy link
Contributor

github-actions bot commented Feb 4, 2025

Outdated packages (gnu64):

priority nix_package version_local version_nixpkgs version_upstream
13 glibc 2.40-36 2.40-36 2.41
11 llvm 19.1.6 17.0.6 19.1.7
11 llvm 19.1.6 19.1.6 19.1.7
11 mimalloc 2.1.8 2.1.8 3.0.1
11 binutils 2.43.1 2.43.1 2.44
10 isl 0.20 0.24 0.27
10 compiler-rt-libc 19.1.6 19.1.6
10 coreutils 9.5 9.5 9.6
7 openssl 3.3.2 1.1.1w 3.4.0
7 openssl 3.3.2 3.3.2 3.4.0
6 libxcrypt 4.4.36 4.4.36 4.4.38
5 perl 5.40.0 5.40.0 5.40.1
5 xz 5.6.3 5.6.3 5.6.4
5 ncurses 6.4.20221231 6.4.20221231 6.5
4 tzdata 2024b 2024b 2025a
4 numactl 2.0.18 2.0.18 2.0.19
4 sqlite 3.47.2 3.47.2 3.48.0
4 kmod 31 31 33
2 dpdk 24.11.1 24.07 24.11.1

Copy link
Contributor

github-actions bot commented Feb 4, 2025

Vulnerable packages (gnu64):

vuln_id url package severity version_local version_nixpkgs version_upstream package_repology sortcol classify
CVE-2024-13176 https://nvd.nist.gov/vuln/detail/CVE-2024-13176 openssl 4.1 3.3.2 3.3.2 3.4.0 openssl 2024A0000013176 err_not_vulnerable_based_on_repology
CVE-2024-9143 https://nvd.nist.gov/vuln/detail/CVE-2024-9143 openssl 4.3 3.3.2 3.3.2 3.4.0 openssl 2024A0000009143 err_not_vulnerable_based_on_repology
OSV-2024-1209 https://osv.dev/OSV-2024-1209 libxml2 2.13.5 2.13.5 2.13.5 libxml2 2024A0000001209 err_not_vulnerable_based_on_repology
OSV-2024-817 https://osv.dev/OSV-2024-817 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000817 err_not_vulnerable_based_on_repology
OSV-2024-395 https://osv.dev/OSV-2024-395 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000395 err_not_vulnerable_based_on_repology
OSV-2023-1307 https://osv.dev/OSV-2023-1307 libbpf 1.5.0 1.5.0 1.5.0 libbpf 2023A0000001307 err_not_vulnerable_based_on_repology
OSV-2023-877 https://osv.dev/OSV-2023-877 libbpf 1.5.0 1.5.0 1.5.0 libbpf 2023A0000000877 err_not_vulnerable_based_on_repology
MAL-2022-6425 https://osv.dev/MAL-2022-6425 tbb 2021.11.0 2022A0000006425 err_missing_repology_version
MAL-2022-4301 https://osv.dev/MAL-2022-4301 libidn2 2.3.7 2.3.7 2.3.7 libidn2 2022A0000004301 err_not_vulnerable_based_on_repology
OSV-2021-777 https://osv.dev/OSV-2021-777 libxml2 2.13.5 2.13.5 2.13.5 libxml2 2021A0000000777 err_not_vulnerable_based_on_repology
RUSTSEC-2019-0006 https://osv.dev/RUSTSEC-2019-0006 ncurses 6.4.20221231 6.4.20221231 6.5 ncurses 2019A0000000006 err_not_vulnerable_based_on_repology
CVE-2016-2781 https://nvd.nist.gov/vuln/detail/CVE-2016-2781 coreutils 6.5 9.5 9.5 9.6 coreutils 2016A0000002781 fix_not_available

@daniel-noland daniel-noland deleted the pr/daniel-noland/remove-clear-deps branch February 4, 2025 04:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant